Compound WireCOMPOUND15 September 2026
pnpm
POSIX BIN SHIMS REPLACED
pnpm v12.4.2
pnpm 12.4.2 fixes a security issue where a dependency executable could take over another package's POSIX bin shim through shell helpers. Existing shims need to be replaced by reinstalling dependencies, so upgrading the lockfile alone is not the whole fix.